         coll1 (save-prov1-collection "coll1")
         gran1 (save-granule coll1)
         create-acl #(:concept_id (ac/create-acl (u/conn-context) % {:token token}))
-        update-acl #(ac/update-acl (u/conn-context) %1 %2 {:token token})]
+        update-acl #(ac/update-acl (u/conn-context) %1 %2 {:token token})
+        ;; required to create catalog item acl
+        _ (create-acl (assoc-in provider-acl-for-catalog-item [:group_permissions 0 :group_id] created-group-concept-id))
+        _ (u/wait-until-indexed)]
 
     (testing "no permissions granted"
       (are [user permissions]

                                  :no-temporal true})
        create-acl #(:concept_id (ac/create-acl (u/conn-context) % {:token token}))
        update-acl #(ac/update-acl (u/conn-context) %1 %2 {:token token})
        get-coll-permissions #(get-permissions :guest coll1 coll2 coll3 coll4)]
    (u/wait-until-indexed)
    (is (= {coll1 []
            coll2 []


(deftest collection-catalog-item-identifier-temporal-test
  ;; tests ACLs that grant access based on a collection's temporal range
  (let [token (e/login-guest (u/conn-context))
        save-temporal-collection (fn [short-name start-year end-year]
                                     (u/save-collection {:entry-title (str short-name " entry title")
                                                         :short-name short-name
